Marco Franssen
94318b02a6
Bump spire to 1.5.3 to fix oidc healthchecks
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:07 +01:00
Marco Franssen
be163d26cc
Allow to configure oidc nginx container resources
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:06 +01:00
Marco Franssen
60b2f7c773
Utilize spiffe csi driver in OIDC component
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:05 +01:00
Marco Franssen
1e31a5e359
Remove autoscaling using HPA
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:05 +01:00
Marco Franssen
79b26108f4
Fix oidc nodeSelector
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:05 +01:00
Marco Franssen
1bdb9a5a50
Move affinity, annotations and tolerations to oidc and server components
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
76a0c5ecfc
Move security values to server and oidc components
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
7834800463
Move replicaCount to server and oidc components
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
ec61c387b0
Fix oidc health check using using scratch images
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:04 +01:00
Marco Franssen
a5afe8979e
Add a template to build the image string
...
This also allows to use image digest as a version
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:03 +01:00
Marco Franssen
569412b5d4
Allow to configure resources per object
...
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:03 +01:00
Marco Franssen and Gert Jan Kamstra
48dacbca64
Fix agent socket mount in spire-oidc
...
Co-authored-by: Gert Jan Kamstra <[email protected] [email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen and Gert Jan Kamstra
4f93ead90a
Configurable insecureScheme nginx image
...
Co-Authored-by: Gert Jan Kamstra <[email protected] [email protected]
2023-02-18 13:04:02 +01:00
Marco Franssen
46466e5ec6
Run oidc insecure on unix socket using Nginx
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
4d3fb47839
Change socket mounts for more control (readonly)
...
pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better
Signed-off-by: Marco Franssen <[email protected] [email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen
f2d7aa1f62
Run oidc discovery provider as separate pod using workload api
...
Signed-off-by: Marco Franssen <[email protected]
2023-02-18 13:04:01 +01:00
Marco Franssen